Linux kernel security vulnerabilities

A security vulnerability exists in the Linux kernel. It arises when a protocol device fails to register its driver and does not cancel the request, resulting in residual expired pointers. Subsequent requests matching these pointers or creating SCMI devices may dereference them, leading to memory...

CVE-2025-37905 firmware: arm_scmi: Balance device refcount when destroying devices

In the Linux kernel, the following vulnerability has been resolved: firmware: armscmi: Balance device refcount when destroying devices Using devicefindchild to lookup the proper SCMI device to destroy causes an unbalance in device refcount, since devicefindchild calls an implicit getdevice: this,...